feat(legal): /delete-account/, the page Google Play is given (D85, D86) #45

Merged
whitlocktech merged 2 commits from feat/delete-account-page into main 2026-10-30 01:42:56 -05:00
Member

Step 5 of docs/website/ACCOUNT_DELETION.md §6 (design: §4.5, AD2). It also fixes the facts drift on main (second commit).

What it does

  • /delete-account/ names the app and us. It gives the steps on a community's site and in the app, lists what goes and what stays with how long each kept thing is kept (Play asks this), and says what to do when you cannot sign in. It cannot delete anything, because we hold no account.
  • The facts are one row. deploy-account-deletion in src/data/collection.mjs holds deletion.goes, .stays (each with a keep) and .staff, in the website's own words (client/src/lib/accountDeletion.js, which the app's strings repeat). /privacy section 3 renders it as prose, the page renders its lists, and PLAY_DATA_SAFETY.md prints them. deletionRow() throws if the row is missing.
  • The app rows a deletion touches (session tokens, trust token, push, inbox snapshot) now say so.
  • PLAY_DATA_SAFETY.md regenerated. It answers "yes" to account deletion and names /delete-account/ as the URL. The "no self-service account deletion today" sentence is gone. A new section lists what a deletion deletes and keeps.
  • lastUpdated is now 2026-10-30. PLAN.md §9 records the page; §10's route table lists it.
  • Facts fix (org lead: fold it in): platform.json now quotes Module API 1.20.0, Module-uo coreApi ^1.20.0 and Module-uo v1.4.0. main had been red on check:facts since account deletion's steps 2 and 3 merged. Every page reads these values from the file, and none needed rewording. The footer and hero chips now read "Module API 1.20.0".

Decisions (org lead, 2026-10-30)

  • D85: linked from the footer's legal bar (Privacy · Terms · Delete account), from /privacy sections 2 and 3, and from under /app/'s "Two ways to get it".
  • D86: someone who can't sign in is told to try "Forgot your password?" first, then their community's operator. The page says plainly that we can't delete accounts ourselves. It offers no contact of ours for this.

Checked

  • All of verify passes locally with a token: check:facts, npm test (60 pass, including 3 new tests on the deletion row), astro check, build, check:links, check:terms (source + built), check:datasafety, check:quickstart, check:reference, test:served, check:a11y (86 pages) and check:csp (86 pages, all hashed).

  • Looked at the built page at 1280 px and 390 px: no horizontal scroll. Also looked at the footer, /privacy §2 and /app/.

  • AI-assisted: written with Claude Code (Claude Opus 5.5); commits carry the Co-Authored-By trailer.

🤖 Generated with Claude Code

https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

Step 5 of `docs/website/ACCOUNT_DELETION.md` §6 (design: §4.5, AD2). It also fixes the facts drift on `main` (second commit). ## What it does - **`/delete-account/`** names the app and us. It gives the steps on a community's site and in the app, lists what goes and what stays with **how long each kept thing is kept** (Play asks this), and says what to do when you cannot sign in. It cannot delete anything, because we hold no account. - **The facts are one row.** `deploy-account-deletion` in `src/data/collection.mjs` holds `deletion.goes`, `.stays` (each with a `keep`) and `.staff`, in the website's own words (`client/src/lib/accountDeletion.js`, which the app's strings repeat). `/privacy` section 3 renders it as prose, the page renders its lists, and `PLAY_DATA_SAFETY.md` prints them. `deletionRow()` throws if the row is missing. - **The app rows a deletion touches** (session tokens, trust token, push, inbox snapshot) now say so. - **`PLAY_DATA_SAFETY.md` regenerated.** It answers "yes" to account deletion and names `/delete-account/` as the URL. The "no self-service account deletion today" sentence is gone. A new section lists what a deletion deletes and keeps. - `lastUpdated` is now 2026-10-30. PLAN.md §9 records the page; §10's route table lists it. - **Facts fix** (org lead: fold it in): `platform.json` now quotes Module API **1.20.0**, Module-uo coreApi **`^1.20.0`** and Module-uo **v1.4.0**. `main` had been red on `check:facts` since account deletion's steps 2 and 3 merged. Every page reads these values from the file, and none needed rewording. The footer and hero chips now read "Module API 1.20.0". ## Decisions (org lead, 2026-10-30) - **D85:** linked from the footer's legal bar (Privacy · Terms · Delete account), from `/privacy` sections 2 and 3, and from under `/app/`'s "Two ways to get it". - **D86:** someone who can't sign in is told to try "Forgot your password?" first, then their community's operator. The page says plainly that we can't delete accounts ourselves. It offers no contact of ours for this. ## Checked - All of `verify` passes locally with a token: `check:facts`, `npm test` (60 pass, including 3 new tests on the deletion row), `astro check`, build, `check:links`, `check:terms` (source + built), `check:datasafety`, `check:quickstart`, `check:reference`, `test:served`, `check:a11y` (86 pages) and `check:csp` (86 pages, all hashed). - Looked at the built page at 1280 px and 390 px: no horizontal scroll. Also looked at the footer, `/privacy` §2 and `/app/`. - [x] AI-assisted: written with Claude Code (Claude Opus 5.5); commits carry the `Co-Authored-By` trailer. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY
wtclaude added 1 commit 2026-10-30 01:26:06 -05:00
feat(legal): /delete-account/, the page Google Play is given (D85, D86)
Some checks failed
PR checks / checks (pull_request) Failing after -31s
094c606238
Step 5 of docs/website/ACCOUNT_DELETION.md (§4.5). The page explains how
to delete an account on a community's site and in the app, what goes,
what stays and for how long, and who to ask when you cannot sign in. It
cannot delete anything, because we hold no account.

- The facts are one deployment row in collection.mjs (deletion.goes,
  .stays with a keep each, .staff), in the website's own words. /privacy
  section 3 renders it as prose, the page renders its lists, and
  PLAY_DATA_SAFETY.md prints them under the console's deletion questions.
- The app rows that a deletion touches (session, trust token, push,
  inbox snapshot) say so. The Data Safety notes now answer "yes" to
  account deletion and name the URL. lastUpdated is 2026-10-30.
- D85: linked from the footer's legal bar, /privacy sections 2 and 3,
  and /app/'s "Two ways to get it".
- D86: someone who cannot sign in is sent to their community's operator,
  never to us.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY
wtclaude added 1 commit 2026-10-30 01:40:58 -05:00
fix(facts): quote Module API 1.20.0 and Module-uo v1.4.0
All checks were successful
PR checks / checks (pull_request) Successful in 2m34s
70b31302b7
check:facts was red on main after account deletion's core and module
steps merged: core's MODULE_API is 1.20.0, Module-uo declares coreApi
^1.20.0, and Module-uo released v1.4.0. Every page reads these from
platform.json, and none needed rewording. Folded into this PR by the org
lead's choice.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY
whitlocktech merged commit caab3476eb into main 2026-10-30 01:42:56 -05:00
whitlocktech deleted branch feat/delete-account-page 2026-10-30 01:42:56 -05:00
Sign in to join this conversation.
No description provided.